High level conclusions

Fuzzer curl_fuzzer/fuzz_fnmatch.cc is blocked:

The runtime code coverage of curl_fuzzer/fuzz_fnmatch.cc covers 28.57% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer curl_fuzzer is blocked:

The runtime code coverage of curl_fuzzer covers 15.66% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 16.34% of cyclomatic complexity.

Fuzzers reach 19.20% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

964 / 5020

Cyclomatic complexity statically reachable by fuzzers

4761 / 29137

Runtime code coverage of functions

1861 / 5020

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_url

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	220	61.1%
gold	[1:9]	2	0.55%
yellow	[10:29]	1	0.27%
greenyellow	[30:49]	1	0.27%
lawngreen	50+	136	37.7%
All colors	360	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
40	292	curl_url_cleanup	call site: 00292	hostname_check
29	261	Curl_urldecode	call site: 00261	checkurl
25	130	formatf	call site: 00130	out_double
13	235	curlx_dyn_addn	call site: 00235	curl_maprintf
12	89	dollarstring	call site: 00089	dollarstring
12	170	curl_url_set	call site: 00170	curl_url_set
11	17	free_urlhandle	call site: 00017	Curl_safefree
11	220	dyn_nappend	call site: 00220	curl_easy_escape
9	184	urlget_url	call site: 00184	curlx_dyn_addf
9	339	ipv6_parse	call site: 00339	inet_pton6
8	119	out_number	call site: 00119	OUTCHAR
6	62	Curl_get_scheme_handler	call site: 00062	set_url_port

Runtime coverage analysis

Covered functions

60

Functions that are reachable but not covered

87

Reachable functions

139

Percentage of reachable functions covered

37.41%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_url.cc	7
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	28
curl/lib/curlx/dynbuf.c	14
curl/tests/libtest/lib1560.c	9
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	7

Fuzzer: curl_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	6228	92.3%
gold	[1:9]	9	0.13%
yellow	[10:29]	23	0.34%
greenyellow	[30:49]	1	0.01%
lawngreen	50+	484	7.17%
All colors	6745	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2511	4207	curlx_str_word	call site: 04207	curl_multi_perform
1276	2930	Curl_setstropt	call site: 02930	state_connect
315	1414	Curl_llist_append	call site: 01414	Curl_close
313	1097	curl_mvaprintf	call site: 01097	Curl_cshutdn_add
232	1732	curlx_dyn_reset	call site: 01732	Curl_req_done
212	293	FormAdd	call site: 00293	free_chain
137	842	Curl_llist_insert_next	call site: 00842	Curl_cshutdn_terminate
120	507	LLVMFuzzerTestOneInput	call site: 00507	fuzz_handle_transfer
109	2818	curlx_str_until	call site: 02818	dnscache_add_addr
104	2372	Curl_close	call site: 02372	curl_multi_perform
91	747	Curl_node_next	call site: 00747	cshutdn_run_once
72	1965	Curl_netrc_cleanup	call site: 01965	Curl_conn_terminate

Runtime coverage analysis

Covered functions

1610

Functions that are reachable but not covered

985

Reachable functions

1168

Percentage of reachable functions covered

15.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/curl_fuzzer.cc	45
curl/lib/easy.c	23
curl/lib/mprintf.c	28
curl/lib/curlx/strparse.c	15
curl/lib/url.c	155
curl/lib/hash.c	17
curl/lib/curlx/dynbuf.c	16
curl/lib/request.c	41
curl/lib/getinfo.c	3
curl/lib/netrc.c	2
curl/lib/mime.c	18
curl/lib/setopt.c	5
curl_fuzzer/curl_fuzzer_tlv.cc	26
curl/lib/slist.c	8
curl/lib/rand.c	17
curl/lib/curlx/timeval.c	3
curl/lib/strdup.c	3
curl/lib/formdata.c	21
curl/lib/strequal.c	3
curl/lib/multi.c	210
curl/lib/hostip.c	79
curl/lib/multi_ntfy.c	12
curl/lib/uint-bset.c	8
curl/lib/multi_ev.c	47
curl/lib/uint-table.c	10
curl/lib/curl_addrinfo.c	8
curl/lib/httpsrr.c	1
curl/lib/cshutdn.c	55
curl/lib/conncache.c	61
curl/lib/vtls/vtls_scache.c	8
curl/lib/sigpipe.h	4
curl/lib/llist.c	7
curl/lib/uint-spbset.c	8
curl/lib/connect.c	19
curl/lib/progress.c	23
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	12
curl/lib/curlx/strerr.c	13
curl/lib/curlx/winapi.c	4
curl/lib/cfilters.c	53
curl/lib/splay.c	3
curl/lib/content_encoding.c	15
curl/lib/select.c	26
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	7
curl/lib/asyn-base.c	9
curl/lib/transfer.c	79
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	6
curl/lib/escape.c	13
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/ratelimit.c	4
curl/lib/http.c	137
curl/lib/bufq.c	22
curl/lib/idn.c	27
curl/lib/vtls/vtls.c	12
curl/lib/curlx/wait.c	5
curl/lib/cw-out.c	29
curl/lib/cw-pause.c	14
curl/lib/sendf.c	29
curl/lib/ws.c	46
curl/lib/curlx/warnless.c	3
curltool_progress.c	11
curl/lib/curl_trc.c	8
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/ftplistparser.c	5
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	9
curl/lib/urlapi.c	57
curl/lib/cookie.c	82
curl/lib/curl_fopen.c	19
curl/lib/rename.c	7
curl/lib/altsvc.c	38
curl/lib/parsedate.c	18
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	32
curl/lib/http_digest.c	6
curl/lib/vauth/digest_sspi.c	28
curl/lib/curl_get_line.c	8
curl/lib/strcase.c	2
curl/tests/libtest/lib1560.c	9
curl/lib/noproxy.c	16
curl/lib/file.c	2
curl/lib/cf-https-connect.c	18
curl/lib/vquic/vquic.c	1
curl/lib/cf-socket.c	6
curl/lib/gopher.c	2
curl/lib/vssh/libssh.c	162
curl/lib/vssh/libssh2.c	160
curl/lib/curlx/base64.c	7
curl/lib/vssh/vssh.c	19
curl/lib/smtp.c	59
curl/lib/pingpong.c	29
curl/lib/curl_sasl.c	52
curl/lib/bufref.c	6
curl/lib/vauth/cleartext.c	4
curl/lib/vauth/krb5_sspi.c	26
curl/lib/vauth/vauth.c	7
curl/lib/curl_sspi.c	11
curl/lib/vauth/gsasl.c	9
curl/lib/vauth/ntlm_sspi.c	26
curl/lib/vauth/oauth2.c	3
curl/lib/vauth/cram.c	9
curl/lib/hmac.c	2
curl/lib/strerror.c	7
curl/lib/vauth/spnego_sspi.c	24
curl/lib/http_negotiate.c	11
curl/lib/http_ntlm.c	11

Fuzzer: curl_fuzzer/fuzz_bufq.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	237	46.5%
gold	[1:9]	63	12.3%
yellow	[10:29]	7	1.37%
greenyellow	[30:49]	5	0.98%
lawngreen	50+	197	38.7%
All colors	509	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
16	0	EP	call site: 00000	fuzz_handle_bufq
12	99	bufq_slurpn	call site: 00099	Curl_bufq_pass
12	387	urlget_format	call site: 00387	checkurl
12	432	curl_url_set	call site: 00432	hostname_check
10	72	Curl_bufq_read	call site: 00072	Curl_bufq_slurp
10	247	out_string	call site: 00247	out_double
10	482	Curl_bufq_skip	call site: 00482	Curl_bufq_write
9	451	ipv6_parse	call site: 00451	inet_pton6
8	59	chunk_peek_at	call site: 00059	Curl_bufq_read
8	423	curlx_dyn_add	call site: 00423	curlx_dyn_ptr
8	469	curl_url_set	call site: 00469	curl_url_set
7	49	chunk_peek	call site: 00049	Curl_bufq_peek_at

Runtime coverage analysis

Covered functions

5930

Functions that are reachable but not covered

24

Reachable functions

59

Percentage of reachable functions covered

59.32%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_bufq.cc	32
curl/lib/bufq.c	29
curl/docs/examples/htmltitle.cpp	1
curl/tests/libtest/lib1560.c	9
curl/lib/urlapi.c	53
curl/lib/url.c	5
curl/lib/strequal.c	3
curl/lib/curlx/strparse.c	4
curl/lib/mprintf.c	28
curl/lib/curlx/dynbuf.c	14
curl/lib/escape.c	13
curl/lib/strdup.c	3
curl/lib/curlx/inet_pton.c	7

Fuzzer: curl_fuzzer/fuzz_fnmatch.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	991	51.3%
gold	[1:9]	283	14.6%
yellow	[10:29]	11	0.56%
greenyellow	[30:49]	1	0.05%
lawngreen	50+	644	33.3%
All colors	1930	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
49	1095	Curl_uint32_spbset_clear	call site: 01095	mev_forget_socket
37	625	curl_free	call site: 00625	curl_mvsnprintf
26	123	Curl_conn_cf_cntrl	call site: 00123	ws_enc_add_pending
24	1688	randit	call site: 01688	curl_maprintf
23	475	curl_mvsnprintf	call site: 00475	time2str
22	224	Curl_poll	call site: 00224	Curl_senddata
20	1509	Curl_pollfds_init	call site: 01509	Curl_cshutdn_add_pollfds
19	0	EP	call site: 00000
19	569	xfer_send	call site: 00569	trc_print_ids
19	1488	cshutdn_perform	call site: 01488	Curl_cshutdn_terminate
16	94	cw_out_cb_write	call site: 00094	Curl_xfer_pause_recv
16	1228	cshutdn_run_conn_handler	call site: 01228	logmsg

Runtime coverage analysis

Covered functions

5930

Functions that are reachable but not covered

5

Reachable functions

7

Percentage of reachable functions covered

28.57%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
curl_fuzzer/fuzz_fnmatch.cc	6
curl/lib/curl_fnmatch.c	1
curl/tests/libtest/lib540.c	16
curl/lib/easy.c	17
curl/lib/sigpipe.h	4
curl/lib/url.c	46
curl/lib/multi.c	120
curl/lib/cw-out.c	29
curl/lib/cw-pause.c	14
curl/lib/sendf.c	10
curl/lib/bufq.c	18
curl/lib/curlx/dynbuf.c	16
curl/lib/transfer.c	16
curl/lib/ratelimit.c	4
curl/lib/curlx/timeval.c	3
curl/lib/cfilters.c	25
curl/lib/ws.c	29
curl/lib/curlx/warnless.c	3
curl/lib/curlx/strparse.c	4
curl/lib/connect.c	7
curl/lib/select.c	26
curl/lib/curlx/wait.c	5
curl/lib/conncache.c	39
curl/lib/hash.c	17
curl/lib/llist.c	7
curl/lib/uint-spbset.c	8
curl/lib/progress.c	15
curltool_progress.c	11
curl/lib/mprintf.c	28
curl/lib/uint-bset.c	5
curl/lib/uint-table.c	8
curl/lib/hostip.c	12
curl/lib/curl_addrinfo.c	1
curl/lib/httpsrr.c	1
curl/lib/request.c	31
curl/lib/curl_trc.c	8
curltool_getparam.c	23
curltool_msgs.c	11
curlterminal.c	6
curl/lib/getenv.c	6
curl/lib/escape.c	8
curltool_paramhlp.c	10
curl/lib/curlx/fopen.c	3
curl/lib/splay.c	3
curl/lib/content_encoding.c	4
curl/lib/doh.c	6
curl/tests/libtest/cli_h2_pausing.c	3
curl/lib/netrc.c	1
curl/lib/ftplistparser.c	4
curl/lib/multi_ev.c	46
curl/tests/unit/unit2600.c	5
curl/lib/asyn-thrdd.c	7
curl/lib/asyn-base.c	9
curl/lib/http.c	6
curl/lib/cshutdn.c	51
curl/tests/server/mqttd.c	6
curl/tests/server/util.c	12
curl/lib/curlx/strerr.c	13
curl/lib/curlx/winapi.c	4
curl/lib/idn.c	1
curl/lib/vtls/vtls.c	2
curl/docs/examples/hiperfifo.c	3
curl/lib/psl.c	2
curl/lib/vtls/vtls_scache.c	6
curl/lib/multi_ntfy.c	3
curl/lib/urlapi.c	2
curl/lib/cookie.c	26
curl/lib/curl_fopen.c	19
curl/lib/rand.c	17
curl/lib/rename.c	7
curl/lib/altsvc.c	15
curl/lib/parsedate.c	2
curl/lib/curlx/inet_pton.c	7
curl/lib/hsts.c	19
curl/lib/slist.c	2
curl/lib/http_digest.c	1
curl/lib/vauth/digest_sspi.c	2
curl/lib/mime.c	8

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
operate	/src/curl/src/tool_operate.c	2	['int', 'argv_item_t[]']	32	0	78	25	34	1572	0	7779	3190
cf_osslq_connect	/src/curl/lib/vquic/curl_osslq.c	3	['struct Curl_cfilter*', 'struct Curl_easy*', 'bool*']	22	0	91	22	29	579	0	2017	1331
myssh_done	/src/curl/lib/vssh/libssh.c	3	['struct Curl_easy*', 'struct ssh_conn*', 'CURLcode']	22	0	9	3	3	419	0	1502	934

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1603 / 5020

Cyclomatic complexity statically reachable by fuzzers

10216 / 29137

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

curl_fuzzer/fuzz_url.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curl_url_cleanup', 'Curl_urldecode', 'formatf', 'curlx_dyn_addn', 'dollarstring', 'curl_url_set', 'free_urlhandle', 'dyn_nappend', 'urlget_url', 'ipv6_parse']

curl_fuzzer/curl_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['curlx_str_word', 'Curl_setstropt', 'Curl_llist_append', 'curl_mvaprintf', 'curlx_dyn_reset', 'FormAdd', 'Curl_llist_insert_next', 'LLVMFuzzerTestOneInput', 'curlx_str_until', 'Curl_close']

curl_fuzzer/fuzz_bufq.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['bufq_slurpn', 'urlget_format', 'curl_url_set', 'Curl_bufq_read', 'out_string', 'Curl_bufq_skip', 'ipv6_parse', 'chunk_peek_at', 'curlx_dyn_add']

curl_fuzzer/fuzz_fnmatch.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['Curl_uint32_spbset_clear', 'curl_free', 'Curl_conn_cf_cntrl', 'randit', 'curl_mvsnprintf', 'Curl_poll', 'Curl_pollfds_init', 'xfer_send', 'cshutdn_perform']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
curl_dbg_log	33	7	21.21%	['curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_url_set	172	58	33.72%	['curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
altsvc_add	47	15	31.91%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
replace_existing	64	9	14.06%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_fopen	51	16	31.37%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
global_init	52	23	44.23%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
FormAdd	273	65	23.80%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
FormAddCheck	65	32	49.23%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts_save	48	26	54.16%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_llist_insert_next	33	17	51.51%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
setopt_slist	52	10	19.23%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
setopt_pointers	96	35	36.45%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
setopt_func	115	25	21.73%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
_dopr	322	113	35.09%
doapr_outch	36	12	33.33%
fmtstr	53	28	52.83%
OPENSSL_cpuid_setup	52	15	28.84%
OpenSSL_version	35	7	20.0%
DSO_load	43	18	41.86%
ENGINE_ctrl_cmd_string	58	27	46.55%
int_ctrl_helper	51	24	47.05%
dynamic_ctrl	72	34	47.22%
dynamic_load	74	19	25.67%
engine_add_dynamic_id	40	6	15.0%
ossl_engine_table_select	76	13	17.10%
EVP_EncryptUpdate	39	21	53.84%
evp_cipher_init_internal	263	62	23.57%
EVP_RAND_CTX_new	39	20	51.28%
CRYPTO_aligned_alloc	37	14	37.83%
OSSL_PARAM_get_int32	71	25	35.21%
OSSL_PARAM_set_int32	65	23	35.38%
OSSL_PARAM_get_uint32	74	25	33.78%
OSSL_PARAM_set_uint32	67	14	20.89%
OSSL_PARAM_get_int64	61	12	19.67%
OSSL_PARAM_set_uint64	73	25	34.24%
ossl_method_store_cache_set	53	29	54.71%
ossl_provider_new	73	32	43.83%
ossl_provider_query_operation	36	10	27.77%
ossl_cipher_generic_get_params	52	21	40.38%
ossl_cipher_generic_block_update	111	25	22.52%
ossl_cipher_generic_stream_update	37	10	27.02%
ossl_cipher_common_get_ctx_params	34	10	29.41%
cipher_generic_get_ctx_params_decoder	88	30	34.09%
ossl_prov_drbg_instantiate	100	48	48.0%
ossl_prov_drbg_generate	73	40	54.79%
ossl_drbg_get_ctx_params	36	15	41.66%
ossl_prov_drbg_reseed_unlocked	72	33	45.83%
drbg_ctr_get_ctx_params_decoder	260	77	29.61%
seed_src_get_ctx_params_decoder	50	23	46.0%
ossl_pool_acquire_entropy	62	23	37.09%
time_to_start_next	37	6	16.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_send	52	21	40.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_socket_query	52	27	51.92%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_conn_connect	83	43	51.80%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_cpool_check_limits	76	14	18.42%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_cshutdn_setfds	31	3	9.677%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cshutdn_terminate_all	39	15	38.46%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cshutdn_perform	34	10	29.41%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_pause_flush	36	7	19.44%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_doh_is_resolved	63	33	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
doh2ai	68	14	20.58%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
show_resolve_info	49	9	18.36%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts	36	15	41.66%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
hsts_pull	35	4	11.42%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_multi_pollset	92	33	35.86%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_update_timer	39	7	17.94%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
multi_xfers_add	35	14	40.0%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
multi_adjust_pollset	37	15	40.54%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
multi_runsingle	282	60	21.27%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
state_do	99	34	34.34%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
mev_assess	35	5	14.28%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_parsenetrc	39	8	20.51%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parsenetrc	223	53	23.76%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
pgrsupdate	41	9	21.95%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
req_flush	46	9	19.56%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_pollset_change	64	30	46.87%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_easy_strerror	183	11	6.010%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
curl_url_strerror	72	21	29.16%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
tftp_translate_code	41	7	17.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_pretransfer	116	7	6.034%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
uint32_spbset_get_chunk	32	10	31.25%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parse_connect_to_slist	105	26	24.76%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parse_connect_to_string	48	22	45.83%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
parse_connect_to_host_port	62	29	46.77%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
url_match_conn	36	6	16.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
url_match_connect_config	31	12	38.70%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_init_method	43	20	46.51%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
client_cert	131	34	25.95%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_init_session_and_alpns	71	25	35.21%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
SSL_ERROR_to_str	36	6	16.66%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ossl_connect	63	33	52.38%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ssl_cf_query	37	14	37.83%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cf_ssl_find_peer_by_key	50	18	36.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
iconveh_open	47	25	53.19%
mem_iconveh	58	24	41.37%
mem_cd_iconveh_internal	584	67	11.47%
mem_iconveha_notranslit	45	6	13.33%
u8_conv_from_encoding	59	10	16.94%
ossl_i2c_ASN1_BIT_STRING	54	24	44.44%
ASN1_mbstring_ncopy	145	61	42.06%
a2d_ASN1_OBJECT	125	67	53.6%
UTF8_getc	53	20	37.73%
UTF8_putc	44	9	20.45%
ASN1_get_object	52	27	51.92%
asn1_item_embed_d2i	239	127	53.13%
asn1_d2i_ex_primitive	100	50	50.0%
asn1_set_seq_out	49	16	32.65%
ossl_asn1_do_adb	33	8	24.24%
buffer_write	58	26	44.82%
buffer_ctrl	169	56	33.13%
BIO_gets	40	21	52.5%
file_ctrl	102	39	38.23%
mem_ctrl	94	48	51.06%
int_bn_mod_inverse	177	83	46.89%
bn_mul_fixed_top	92	49	53.26%
i2d_ECDSA_SIG	35	13	37.14%
ossl_ec_key_param_from_x509_algor	36	18	50.0%
ec_group_explicit_todata	109	29	26.60%
ossl_ec_key_new_method_int	48	20	41.66%
ossl_ec_group_new_ex	39	20	51.28%
EC_GROUP_copy	87	45	51.72%
EC_GROUP_set_generator	41	20	48.78%
ossl_ec_GFp_simple_oct2point	80	43	53.75%
ossl_ec_GFp_simple_is_on_curve	71	33	46.47%
ossl_ecx_key_new	36	15	41.66%
OSSL_DECODER_from_bio	57	19	33.33%
collect_decoder_keymgmt	47	24	51.06%
ossl_decoder_ctx_for_pkey_dup	74	40	54.05%
EVP_DigestUpdate	31	11	35.48%
EVP_DigestFinal_ex	43	20	46.51%
EVP_DigestFinalXOF	39	15	38.46%
evp_md_init_internal	152	57	37.5%
evp_pkey_get_legacy	33	7	21.21%
detect_foreign_key	32	13	40.62%
EVP_PKEY_generate	77	29	37.66%
gen_init	54	21	38.88%
evp_pkey_ctx_free_old_ops	31	10	32.25%
EVP_PKEY_CTX_set_params	43	15	34.88%
OBJ_create	38	18	47.36%
OBJ_add_sigid	46	18	39.13%
ossl_obj_find_sigid_algs	31	14	45.16%
wpacket_intern_close	50	22	44.0%
OSSL_PARAM_get_uint64	67	12	17.91%
PEM_X509_INFO_read_bio_ex	148	74	50.0%
PEM_do_header	46	13	28.26%
PEM_get_EVP_CIPHER_INFO	54	8	14.81%
pem_bytes_read_bio_flags	33	16	48.48%
sanitize_line	34	15	44.11%
ossl_ifc_ffc_compute_security_bits	39	16	41.02%
rsa_new_intern	53	25	47.16%
X509_load_crl_file	55	29	52.72%
ossl_x509v3_cache_extensions	193	100	51.81%
X509_STORE_new	36	13	36.11%
x509_sig_info_init	61	33	54.09%
X509_VERIFY_PARAM_inherit	48	26	54.16%
ec_get_ecm_params	42	8	19.04%
ecx_get_params_decoder	132	67	50.75%
ecx_gen_set_params	43	19	44.18%
ecx_gen_set_params_decoder	40	16	40.0%
ecx_gen	57	25	43.85%
ml_kem_get_params	63	23	36.50%
ml_kem_get_params_decoder	160	69	43.12%
ml_kem_export	71	36	50.70%
export_sub_cb	34	14	41.17%
ml_kem_import_export_decoder	35	17	48.57%
rsa_get_params	37	20	54.05%
tls_get_more_records	283	115	40.63%
tls_set_options	43	21	48.83%
tls_int_new_record_layer	100	45	45.0%
tls_post_encryption_processing_default	47	17	36.17%
tls_retry_write_records	61	30	49.18%
tls_new_record_layer	37	19	51.35%
ssl3_read_bytes	297	129	43.43%
ssl3_ctrl	353	32	9.065%
ssl3_ctx_ctrl	219	35	15.98%
ssl_generate_pkey_group	32	16	50.0%
ssl3_dispatch_alert	60	32	53.33%
ssl_cert_dup	107	39	36.44%
ossl_ctrl_internal	98	12	12.24%
SSL_CTX_ctrl	110	27	24.54%
SSL_CTX_new_ex	164	86	52.43%
ossl_ssl_get_error	74	37	50.0%
ssl_do_config	65	21	32.30%
use_certificate_chain_file	95	31	32.63%
final_server_name	68	19	27.94%
tls_construct_ctos_session_ticket	32	4	12.5%
tls_construct_ctos_status_request	49	16	32.65%
tls_construct_ctos_early_data	122	23	18.85%
tls_construct_ctos_padding	37	19	51.35%
tls_construct_ctos_psk	115	14	12.17%
tls_parse_stoc_renegotiate	39	21	53.84%
tls_parse_stoc_sct	39	13	33.33%
tls_parse_stoc_alpn	64	19	29.68%
custom_ext_parse	32	10	31.25%
custom_ext_add	64	9	14.06%
ossl_statem_client_read_transition	151	19	12.58%
ossl_statem_client_write_transition	107	13	12.14%
ossl_statem_client_pre_work	41	12	29.26%
ossl_statem_client_post_work	83	13	15.66%
ossl_statem_client_construct_message	54	10	18.51%
ossl_statem_client_max_message_size	37	7	18.91%
ossl_statem_client_process_message	36	7	19.44%
tls_construct_client_hello	125	63	50.4%
tls_process_server_certificate	77	21	27.27%
set_client_ciphersuite	49	26	53.06%
ssl3_do_write	50	20	40.0%
tls_setup_handshake	78	23	29.48%
tls1_alert_code	74	20	27.02%
tls12_sigalg_allowed	46	20	43.47%
ssl_srp_ctx_init_intern	58	27	46.55%
fuzz_handle_transfer(fuzz_data*)	79	32	40.50%
on_resp_header	59	23	38.98%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_debug	44	3	6.818%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_out_do_write	35	16	45.71%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_out_cb_write	33	17	51.51%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cw_pause_write	51	21	41.17%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_getformdata	91	44	48.35%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_hsts_parse	75	25	33.33%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
http_target	85	45	52.94%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
on_header	135	65	48.14%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
add_last_chunk	40	10	25.0%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cr_mime_read	112	47	41.96%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_multi_xfer_buf_borrow	37	20	54.05%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
state_performing	97	45	46.39%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
cr_in_rewind	47	16	34.04%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_sendrecv	57	27	47.36%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_retry_request	41	14	34.14%	['curl_fuzzer', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
urlset_clear	45	15	33.33%	['curl_fuzzer', 'fuzz_url', '/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
Curl_auth_decode_digest_http_message	113	43	38.05%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
auth_create_digest_http_message	189	94	49.73%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
nghttp2_iv_check	40	17	42.5%
nghttp2_hd_deflate_hd_bufs	35	12	34.28%
nghttp2_strerror	92	12	13.04%
nghttp2_outbound_item_free	58	30	51.72%
nghttp2_session_add_rst_stream_continue	57	26	45.61%
nghttp2_session_on_request_headers_received	60	16	26.66%
nghttp2_session_update_local_settings	72	36	50.0%
nghttp2_session_pack_data	107	55	51.40%
nghttp2_session_set_stream_user_data	31	13	41.93%
nghttp2_session_mem_send_internal	213	111	52.11%
session_prep_frame	254	129	50.78%
SSL_CTX_use_certificate_file	44	16	36.36%
rtsp_filter_rtp	139	71	51.07%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
pkcs12load	92	18	19.56%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
ber_scanf	238	126	52.94%
ber_set_option	78	14	17.94%
ber_sockbuf_ctrl	60	26	43.33%
ldap_int_put_controls	36	11	30.55%
ldap_pvt_get_controls	67	9	13.43%
ldap_build_extended_req	33	16	48.48%
openldap_ldap_init_w_conf	42	14	33.33%
openldap_ldap_init_w_env	81	19	23.45%
ldap_get_option	268	22	8.208%
ldap_set_option	397	68	17.12%
ldap_send_server_request	129	63	48.83%
ldap_new_connection	155	20	12.90%
ldap_msgdelete	37	19	51.35%
ldap_build_bind_req	50	22	44.0%
ldap_build_search_req	70	32	45.71%
ldap_tavl_insert	106	39	36.79%
ldap_tavl_delete	176	65	36.93%
ldap_url_dup	60	30	50.0%
skip_url_prefix	42	20	47.61%
ftp_state_ul_setup	58	27	46.55%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
bnrand	61	25	40.98%
generate_key	95	46	48.42%
dh_new_intern	49	22	44.89%
EC_GROUP_new_from_params	180	26	14.44%
ossl_ec_wNAF_mul	258	25	9.689%
ossl_ec_GFp_nistp384_points_mul	148	69	46.62%
ossl_ec_GFp_nistp521_points_mul	153	69	45.09%
ossl_ec_GFp_simple_point_get_affine_coordinates	82	33	40.24%
ossl_ec_GFp_simple_cmp	74	13	17.56%
dh_gen	82	34	41.46%
ec_gen	45	24	53.33%
ec_gen_set_group_from_params	65	27	41.53%
Curl_auth_create_digest_md5_message	110	27	24.54%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
engineload	49	11	22.44%
imap_state_capability_resp	53	19	35.84%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']
OPENSSL_DIR_read	31	17	54.83%
file_set_ctx_params	50	9	18.0%
file_set_ctx_params_decoder	50	16	32.0%
Curl_multi_xfer_ulbuf_borrow	38	20	52.63%	['/src/curl_fuzzer/fuzz_fnmatch.cc', '/src/curl_fuzzer/fuzz_bufq.cc']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

tool_operate.c

Target file: /src/curl/src/tool_operate.c
Target functions: operate

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target operate */
  int new_var0 = ada_safe_get_int();
  UNKNOWN_TYPE unknown_1;
  operate(new_var0, unknown_1);

  af_safe_gb_cleanup();
}

curl_osslq.c

Target file: /src/curl/lib/vquic/curl_osslq.c
Target functions: cf_osslq_connect

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target cf_osslq_connect */
  structCurl_cfilter* new_var2 = calloc(sizeof(structCurl_cfilter), 1);
  structCurl_easy* new_var3 = calloc(sizeof(structCurl_easy), 1);
  UNKNOWN_TYPE unknown_4;
  cf_osslq_connect(new_var2, new_var3, unknown_4);

  af_safe_gb_cleanup();
}

libssh.c

Target file: /src/curl/lib/vssh/libssh.c
Target functions: myssh_done

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target myssh_done */
  structCurl_easy* new_var5 = calloc(sizeof(structCurl_easy), 1);
  structssh_conn* new_var6 = calloc(sizeof(structssh_conn), 1);
  UNKNOWN_TYPE unknown_7;
  myssh_done(new_var5, new_var6, unknown_7);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/curl/lib/psl.h	[]	[]
/src/curl/lib/dict.c	[]	[]
/src/curl/lib/vauth/cleartext.c	['curl_fuzzer']	[]
/src/curl/lib/request.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1658.c	[]	[]
/src/curl/tests/libtest/lib572.c	[]	[]
/src/curl/tests/libtest/lib1564.c	[]	[]
/src/curl/tests/libtest/lib1913.c	[]	[]
/src/curl/lib/bufref.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib598.c	[]	[]
/src/curl/docs/examples/synctime.c	[]	[]
/src/curl/src/slist_wc.c	[]	[]
/src/curl_fuzzer/curl_fuzzer_tlv.cc	['curl_fuzzer']	[]
/src/curl/docs/examples/hsts-preload.c	[]	[]
/src/curl/tests/libtest/lib1526.c	[]	[]
/src/curl/lib/psl.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib1598.c	[]	[]
/src/curl/lib/curlx/multibyte.h	[]	[]
/src/curl/lib/vtls/mbedtls_threadlock.h	[]	[]
/src/curl/lib/progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/usercertinmem.c	[]	[]
/src/curl/lib/curlx/fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib3208.c	[]	[]
/src/curl/lib/gopher.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1558.c	[]	[]
/src/curl/docs/examples/block_ip.c	[]	[]
/src/curl/tests/libtest/lib1550.c	[]	[]
/src/curl/lib/vquic/vquic.c	['curl_fuzzer']	[]
/src/curl/lib/vssh/libssh2.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1552.c	[]	[]
/src/curl/tests/libtest/lib3101.c	[]	[]
/src/curl/lib/multi_ntfy.h	[]	[]
/src/curl/tests/libtest/lib1511.c	[]	[]
/src/curl/lib/vtls/vtls_scache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_getpass.c	[]	[]
/src/curl/tests/libtest/lib1535.c	[]	[]
/src/curl/tests/unit/unit1657.c	[]	[]
/src/curl/tests/unit/unit1652.c	[]	[]
/src/curl/lib/easy_lock.h	[]	[]
/src/curl/tests/libtest/lib576.c	[]	[]
/src/curl/lib/cf-socket.h	[]	[]
/src/curl/lib/ws.h	[]	[]
/src/curl/lib/mime.h	[]	[]
/src/curl/tests/libtest/cli_hx_download.c	[]	[]
/src/curl/tests/unit/unit1979.c	[]	[]
/src/curl/tests/libtest/lib1565.c	[]	[]
/src/curl/lib/openldap.c	[]	[]
/src/curl/lib/multi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_digest.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/fuzz_fnmatch.cc	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib500.c	[]	[]
/src/curl/tests/server/mqttd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1538.c	[]	[]
/src/curl/lib/url.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_cfgable.h	[]	[]
/src/curl/tests/libtest/lib1903.c	[]	[]
/src/curl/src/tool_msgs.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib574.c	[]	[]
/src/curl/tests/libtest/lib1977.c	[]	[]
/src/curl/tests/libtest/lib590.c	[]	[]
/src/curl/tests/unit/unit1664.c	[]	[]
/src/curl/tests/unit/unit2604.c	[]	[]
/src/curl/lib/http2.c	[]	[]
/src/curl/tests/libtest/lib537.c	[]	[]
/src/curl/lib/pingpong.h	[]	[]
/src/curl/lib/strcase.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib555.c	[]	[]
/src/curl/lib/curl_threads.c	[]	[]
/src/curl/tests/unit/unit1302.c	[]	[]
/src/curl/tests/libtest/lib1972.c	[]	[]
/src/curl/lib/cookie.h	[]	[]
/src/curl/lib/curl_fnmatch.c	['curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/amigaos.h	[]	[]
/src/curl/tests/libtest/lib2082.c	[]	[]
/src/curl/lib/easy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/setopt.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/CMake/CurlTests.c	[]	[]
/src/curl/src/tool_cfgable.c	[]	[]
/src/curl/lib/uint-bset.h	[]	[]
/src/curl/lib/mqtt.c	[]	[]
/src/curl/tests/unit/unit1398.c	[]	[]
/src/curl/lib/multi_ev.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib666.c	[]	[]
/src/curl/lib/curlx/inet_pton.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/docs/examples/xmlstream.c	[]	[]
/src/curl/lib/telnet.c	[]	[]
/src/curl/tests/libtest/lib2301.c	[]	[]
/src/curl/lib/sha256.c	[]	[]
/src/curl/tests/libtest/lib1919.c	[]	[]
/src/curl/docs/examples/sftpuploadresume.c	[]	[]
/src/curl/tests/libtest/lib573.c	[]	[]
/src/curl/include/curl/curlver.h	[]	[]
/src/curl/tests/libtest/lib1956.c	[]	[]
/src/curl/src/tool_cb_dbg.c	[]	[]
/src/curl/tests/libtest/lib659.c	[]	[]
/src/curl/tests/server/dnsd.c	[]	[]
/src/curl/tests/libtest/lib3104.c	[]	[]
/src/curl/lib/parsedate.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit2601.c	[]	[]
/src/curl/tests/unit/unit2605.c	[]	[]
/src/curl/tests/libtest/lib530.c	[]	[]
/src/curl/tests/libtest/lib566.c	[]	[]
/src/curl/tests/libtest/lib517.c	[]	[]
/src/curl/lib/urldata.h	[]	[]
/src/curl/tests/libtest/lib753.c	[]	[]
/src/curl/lib/curlx/binmode.h	[]	[]
/src/curl/tests/libtest/lib1591.c	[]	[]
/src/curl/tests/unit/unit1603.c	[]	[]
/src/curl/lib/curl_sasl.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1529.c	[]	[]
/src/curl/docs/examples/ftpuploadresume.c	[]	[]
/src/curl/tests/libtest/lib1900.c	[]	[]
/src/curl/lib/vtls/gtls.c	[]	[]
/src/curl/tests/libtest/lib571.c	[]	[]
/src/curl/lib/fileinfo.c	[]	[]
/src/curl/src/tool_doswin.c	[]	[]
/src/curl/tests/libtest/lib1500.c	[]	[]
/src/curl/lib/vtls/vtls_spack.c	[]	[]
/src/curl/tests/libtest/lib518.c	[]	[]
/src/curl/lib/strequal.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/lib/hostip6.c	[]	[]
/src/curl/lib/system_win32.c	[]	[]
/src/curl/tests/libtest/lib524.c	[]	[]
/src/curl/lib/asyn-thrdd.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/asyn-ares.c	[]	[]
/src/curl/tests/unit/unit1610.c	[]	[]
/src/curl/tests/unit/unit3212.c	[]	[]
/src/curl/tests/libtest/cli_ws_data.c	[]	[]
/src/curl/tests/libtest/lib3207.c	[]	[]
/src/curl/lib/cf-https-connect.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib2308.c	[]	[]
/src/curl/tests/libtest/lib1536.c	[]	[]
/src/curl/tests/libtest/lib667.c	[]	[]
/src/curl/tests/libtest/lib512.c	[]	[]
/src/curl/lib/curl_setup_once.h	[]	[]
/src/curl/tests/libtest/lib3010.c	[]	[]
/src/curl/tests/libtest/lib1955.c	[]	[]
/src/curl/lib/vquic/vquic-tls.c	[]	[]
/src/curl/lib/uint-hash.c	[]	[]
/src/curl/tests/unit/unit3200.c	[]	[]
/src/curl/lib/curl_sha512_256.c	[]	[]
/src/curl/lib/hostip4.c	[]	[]
/src/curl/tests/libtest/lib1933.c	[]	[]
/src/curl/lib/formdata.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/lib/strerror.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1905.c	[]	[]
/src/curl/tests/unit/unit1600.c	[]	[]
/src/curl/src/var.c	[]	[]
/src/curl/lib/conncache.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib674.c	[]	[]
/src/curl/tests/libtest/lib510.c	[]	[]
/src/curl/src/tool_cb_wrt.c	[]	[]
/src/curl/lib/system_win32.h	[]	[]
/src/curl/tests/libtest/lib1597.c	[]	[]
/src/curl/tests/libtest/lib544.c	[]	[]
/src/curl/tests/libtest/lib1973.c	[]	[]
/src/curl/tests/unit/unit1609.c	[]	[]
/src/curl/lib/vauth/digest_sspi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib504.c	[]	[]
/src/curl/docs/examples/htmltitle.cpp	['curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/unit/unit1323.c	[]	[]
/src/curl/lib/rename.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib560.c	[]	[]
/src/curl/tests/libtest/lib505.c	[]	[]
/src/curl/tests/server/socksd.c	[]	[]
/src/curl/docs/examples/smooth-gtk-thread.c	[]	[]
/src/curl/tests/libtest/lib694.c	[]	[]
/src/curl/tests/unit/unit1330.c	[]	[]
/src/curl/tests/libtest/lib1936.c	[]	[]
/src/curl/lib/vtls/vtls.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1540.c	[]	[]
/src/curl/lib/vssh/libssh.c	['curl_fuzzer']	[]
/src/curl/lib/altsvc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/setopt.h	[]	[]
/src/curl/src/tool_helpers.c	[]	[]
/src/curl/lib/doh.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib678.c	[]	[]
/src/curl/tests/libtest/lib676.c	[]	[]
/src/curl/tests/unit/unit1980.c	[]	[]
/src/curl/docs/examples/10-at-a-time.c	[]	[]
/src/curl_fuzzer/fuzz_url.cc	['fuzz_url']	['fuzz_url']
/src/curl/tests/unit/unit1661.c	[]	[]
/src/curl/tests/libtest/lib3027.c	[]	[]
/src/curl/lib/hmac.c	['curl_fuzzer']	[]
/src/curl/docs/examples/http2-pushinmemory.c	[]	[]
/src/curl/lib/http.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/hostip.h	[]	[]
/src/curl/include/curl/mprintf.h	[]	[]
/src/curl/tests/unit/unit3205.c	[]	[]
/src/curl/lib/netrc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/http_proxy.c	[]	[]
/src/curl/tests/unit/unit1612.c	[]	[]
/src/curl/tests/libtest/lib2405.c	[]	[]
/src/curl/lib/setup-vms.h	[]	[]
/src/curl/tests/libtest/lib1545.c	[]	[]
/src/curl/tests/unit/unit1602.c	[]	[]
/src/curl/tests/libtest/lib766.c	[]	[]
/src/curl/tests/libtest/lib651.c	[]	[]
/src/curl/src/tool_vms.h	[]	[]
/src/curl/tests/libtest/lib670.c	[]	[]
/src/curl/lib/curlx/strparse.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit2600.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/escape.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1518.c	[]	[]
/src/curl/src/tool_cb_hdr.c	[]	[]
/src/curl/lib/curl_range.c	[]	[]
/src/curl/tests/libtest/lib542.c	[]	[]
/src/curl/lib/cf-socket.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib2402.c	[]	[]
/src/curl/tests/unit/unit1305.c	[]	[]
/src/curl/lib/curl_fopen.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_addrinfo.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1654.c	[]	[]
/src/curl/lib/connect.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1530.c	[]	[]
/src/curl/tests/libtest/first.c	[]	[]
/src/curl/lib/curlx/timediff.c	[]	[]
/src/curl/src/tool_cb_see.c	[]	[]
/src/curl/lib/strcase.h	[]	[]
/src/curl/lib/fake_addrinfo.c	[]	[]
/src/curl/tests/libtest/lib1662.c	[]	[]
/src/curl/tests/libtest/lib1513.c	[]	[]
/src/curl/tests/unit/unit1663.c	[]	[]
/src/curl/tests/libtest/cli_h2_upgrade_extreme.c	[]	[]
/src/curl/tests/libtest/lib654.c	[]	[]
/src/curl/lib/uint-bset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/cli_upload_pausing.c	[]	[]
/src/curl/lib/http_proxy.h	[]	[]
/src/curl/lib/sendf.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2302.c	[]	[]
/src/curl/lib/vauth/gsasl.c	['curl_fuzzer']	[]
/src/curl/lib/curlx/version_win32.c	[]	[]
/src/curl/tests/unit/unit1303.c	[]	[]
/src/curl/docs/examples/multi-event.c	[]	[]
/src/curl/lib/vtls/hostcheck.c	[]	[]
/src/curl/tests/libtest/lib533.c	[]	[]
/src/curl/src/tool_strdup.c	[]	[]
/src/curl/tests/libtest/testtrace.c	[]	[]
/src/curl/tests/libtest/lib1559.c	[]	[]
/src/curl/lib/vquic/curl_osslq.c	[]	[]
/src/curl/tests/libtest/lib2404.c	[]	[]
/src/curl/include/curl/typecheck-gcc.h	[]	[]
/src/curl/src/terminal.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_get_line.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib653.c	[]	[]
/src/curl/tests/unit/unit2603.c	[]	[]
/src/curl/tests/libtest/lib1594.c	[]	[]
/src/curl/tests/libtest/lib1901.c	[]	[]
/src/curl/lib/curlx/multibyte.c	[]	[]
/src/curl/lib/curlx/warnless.h	[]	[]
/src/curl/tests/libtest/lib1911.c	[]	[]
/src/curl/lib/llist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/server/util.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/tests/libtest/lib553.c	[]	[]
/src/curl/tests/libtest/lib643.c	[]	[]
/src/curl/lib/socks_gssapi.c	[]	[]
/src/curl/tests/libtest/lib520.c	[]	[]
/src/curl/lib/dynhds.c	[]	[]
/src/curl/src/tool_formparse.c	[]	[]
/src/curl/tests/libtest/lib514.c	[]	[]
/src/curl/lib/http1.c	[]	[]
/src/curl/docs/examples/http2-upload.c	[]	[]
/src/curl/lib/curl_gssapi.c	[]	[]
/src/curl/lib/cw-out.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib2032.c	[]	[]
/src/curl/lib/curlx/wait.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/src/tool_writeout.c	[]	[]
/src/curl/tests/libtest/lib540.c	['curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vauth/vauth.h	[]	[]
/src/curl/src/tool_vms.c	[]	[]
/src/curl/tests/libtest/lib1940.c	[]	[]
/src/curl/docs/examples/htmltidy.c	[]	[]
/src/curl/lib/if2ip.c	[]	[]
/src/curl/tests/libtest/lib1599.c	[]	[]
/src/curl/tests/libtest/lib1912.c	[]	[]
/src/curl/lib/curlx/warnless.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1605.c	[]	[]
/src/curl/lib/uint-spbset.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1522.c	[]	[]
/src/curl/src/tool_paramhlp.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curl_sasl.h	[]	[]
/src/curl/tests/libtest/lib507.c	[]	[]
/src/curl/lib/curlx/strerr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1656.c	[]	[]
/src/curl/tests/libtest/lib562.c	[]	[]
/src/curl/lib/socks_sspi.c	[]	[]
/src/curl/src/tool_getparam.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/vauth/oauth2.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1937.c	[]	[]
/src/curl/src/tool_dirhie.c	[]	[]
/src/curl/tests/libtest/lib3103.c	[]	[]
/src/curl/tests/libtest/lib1515.c	[]	[]
/src/curl/tests/libtest/lib1156.c	[]	[]
/src/curl/src/tool_cb_rea.c	[]	[]
/src/curl/lib/select.h	[]	[]
/src/curl/tests/libtest/lib583.c	[]	[]
/src/curl/tests/libtest/lib564.c	[]	[]
/src/curl/lib/vtls/schannel.c	[]	[]
/src/curl/lib/curlx/inet_pton.h	[]	[]
/src/curl/docs/examples/ftp-wildcard.c	[]	[]
/src/curl/lib/asyn-base.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1308.c	[]	[]
/src/curl/tests/libtest/lib650.c	[]	[]
/src/curl/docs/examples/websocket.c	[]	[]
/src/curl/lib/vtls/schannel_verify.c	[]	[]
/src/curl/lib/curlx/strparse.h	[]	[]
/src/curl/tests/libtest/lib506.c	[]	[]
/src/curl/tests/libtest/lib515.c	[]	[]
/src/curl/docs/examples/externalsocket.c	[]	[]
/src/curl/src/tool_setopt.c	[]	[]
/src/curl/lib/vquic/curl_ngtcp2.c	[]	[]
/src/curl/lib/vtls/vtls.h	[]	[]
/src/curl/lib/vauth/vauth.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib2700.c	[]	[]
/src/curl/tests/libtest/lib2306.c	[]	[]
/src/curl/tests/libtest/lib509.c	[]	[]
/src/curl/packages/OS400/os400sys.c	[]	[]
/src/curl/tests/libtest/lib652.c	[]	[]
/src/curl/tests/libtest/lib1975.c	[]	[]
/src/curl/tests/libtest/lib1541.c	[]	[]
/src/curl/lib/urlapi.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/uint-table.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/easyoptions.c	[]	[]
/src/curl/tests/libtest/lib1542.c	[]	[]
/src/curl/lib/smb.c	[]	[]
/src/curl/docs/examples/evhiperfifo.c	[]	[]
/src/curl/tests/libtest/testutil.c	[]	[]
/src/curl/src/tool_util.c	[]	[]
/src/curl/lib/cshutdn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vauth/cram.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1554.c	[]	[]
/src/curl/tests/libtest/lib1567.c	[]	[]
/src/curl/src/tool_filetime.h	[]	[]
/src/curl/tests/libtest/lib502.c	[]	[]
/src/curl/lib/ftplistparser.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_ntlm_core.c	[]	[]
/src/curl/tests/libtest/lib1939.c	[]	[]
/src/curl/lib/curl_gethostname.c	[]	[]
/src/curl/src/tool_ssls.c	[]	[]
/src/curl/tests/libtest/lib521.c	[]	[]
/src/curl/lib/macos.h	[]	[]
/src/curl/tests/libtest/lib2304.c	[]	[]
/src/curl/tests/server/sockfilt.c	[]	[]
/src/curl/tests/libtest/cli_tls_session_reuse.c	[]	[]
/src/curl/tests/libtest/lib1525.c	[]	[]
/src/curl/tests/unit/unit1614.c	[]	[]
/src/curl/lib/memdebug.c	[]	[]
/src/curl/docs/examples/ghiper.c	[]	[]
/src/curl/tests/libtest/lib1508.c	[]	[]
/src/curl/tests/libtest/lib1556.c	[]	[]
/src/curl/tests/libtest/lib1960.c	[]	[]
/src/curl/tests/libtest/lib513.c	[]	[]
/src/curl/lib/rand.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib501.c	[]	[]
/src/curl/lib/curl_share.c	[]	[]
/src/curl/tests/libtest/lib658.c	[]	[]
/src/curl/lib/curlx/fopen.h	[]	[]
/src/curl/tests/libtest/lib1959.c	[]	[]
/src/curl/tests/unit/unit3211.c	[]	[]
/src/curl/src/tool_getparam.h	[]	[]
/src/curl/tests/libtest/lib1520.c	[]	[]
/src/curl/tests/unit/unit1653.c	[]	[]
/src/curl/src/tool_xattr.c	[]	[]
/src/curl/tests/unit/unit1396.c	[]	[]
/src/curl/tests/libtest/cli_hx_upload.c	[]	[]
/src/curl/lib/pingpong.c	['curl_fuzzer']	[]
/src/curl/tests/http/testenv/mod_curltest/mod_curltest.c	[]	[]
/src/curl/lib/headers.c	[]	[]
/src/curl/lib/content_encoding.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit3216.c	[]	[]
/src/curl/tests/libtest/lib519.c	[]	[]
/src/curl/tests/libtest/lib1908.c	[]	[]
/src/curl/src/tool_cb_prg.c	[]	[]
/src/curl/tests/libtest/lib758.c	[]	[]
/src/curl/tests/server/rtspd.c	[]	[]
/src/curl/tests/libtest/lib1560.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	[]
/src/curl/tests/libtest/lib1531.c	[]	[]
/src/curl/tests/libtest/lib1906.c	[]	[]
/src/curl/tests/libtest/lib1582.c	[]	[]
/src/curl/lib/httpsrr.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/curlx/inet_ntop.c	[]	[]
/src/curl/lib/vtls/keylog.c	[]	[]
/src/curl/tests/unit/unit1304.c	[]	[]
/src/curl_fuzzer/fuzz_bufq.cc	['curl_fuzzer/fuzz_bufq.cc']	['curl_fuzzer/fuzz_bufq.cc']
/src/curl/src/tool_writeout_json.c	[]	[]
/src/curl/lib/vssh/vssh.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1974.c	[]	[]
/src/curl/lib/cf-h1-proxy.c	[]	[]
/src/curl/tests/libtest/lib677.c	[]	[]
/src/curl/tests/libtest/lib655.c	[]	[]
/src/curl/tests/libtest/lib1910.c	[]	[]
/src/curl/tests/unit/unit1615.c	[]	[]
/src/curl/tests/libtest/lib751.c	[]	[]
/src/curl/src/tool_setopt.h	[]	[]
/src/curl/lib/curlx/base64.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1534.c	[]	[]
/src/curl/docs/examples/cacertinmem.c	[]	[]
/src/curl/tests/libtest/lib1502.c	[]	[]
/src/curl/packages/vms/curl_crtl_init.c	[]	[]
/src/curl/lib/vtls/openssl.c	[]	[]
/src/curl/docs/examples/crawler.c	[]	[]
/src/curl/tests/libtest/lib1902.c	[]	[]
/src/curl/tests/libtest/lib1512.c	[]	[]
/src/curl/lib/bufq.c	['curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/src/tool_progress.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/docs/examples/ephiperfifo.c	[]	[]
/src/curl/tests/libtest/lib1971.c	[]	[]
/src/curl/tests/unit/unit1608.c	[]	[]
/src/curl/tests/libtest/cli_h2_pausing.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/imap.c	[]	[]
/src/curl/tests/libtest/lib599.c	[]	[]
/src/curl/tests/server/getpart.c	[]	[]
/src/curl/tests/libtest/lib1509.c	[]	[]
/src/curl/tests/libtest/lib559.c	[]	[]
/src/curl/lib/vtls/rustls.c	[]	[]
/src/curl/tests/libtest/lib526.c	[]	[]
/src/curl/tests/libtest/lib558.c	[]	[]
/src/curl/tests/libtest/lib1945.c	[]	[]
/src/curl/lib/setup-os400.h	[]	[]
/src/curl/tests/libtest/lib552.c	[]	[]
/src/curl/lib/md4.c	[]	[]
/src/curl/lib/socketpair.h	[]	[]
/src/curl/docs/examples/ftpgetinfo.c	[]	[]
/src/curl/src/config2setopts.c	[]	[]
/src/curl/docs/examples/http2-download.c	[]	[]
/src/curl/lib/curlx/nonblock.c	[]	[]
/src/curl/tests/libtest/lib1970.c	[]	[]
/src/curl/tests/libtest/lib3026.c	[]	[]
/src/curl/tests/libtest/lib668.c	[]	[]
/src/curl/lib/vquic/vquic_int.h	[]	[]
/src/curl/packages/OS400/curlcl.c	[]	[]
/src/curl/lib/arpa_telnet.h	[]	[]
/src/curl/lib/curl_trc.h	[]	[]
/src/curl/lib/cfilters.h	[]	[]
/src/curl/lib/getenv.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/url.h	[]	[]
/src/curl/tests/libtest/lib1576.c	[]	[]
/src/curl/lib/curl_rtmp.c	[]	[]
/src/curl/lib/select.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1555.c	[]	[]
/src/curl/tests/libtest/lib586.c	[]	[]
/src/curl/tests/server/first.h	[]	[]
/src/curl/tests/libtest/lib1934.c	[]	[]
/src/curl/lib/transfer.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib539.c	[]	[]
/src/curl/tests/libtest/lib1514.c	[]	[]
/src/curl/lib/noproxy.c	['curl_fuzzer']	[]
/src/curl/src/tool_setup.h	[]	[]
/src/curl/tests/unit/unit1616.c	[]	[]
/src/curl/src/tool_parsecfg.c	[]	[]
/src/curl/lib/curlx/dynbuf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib591.c	[]	[]
/src/curl/tests/libtest/cli_h2_serverpush.c	[]	[]
/src/curl/tests/unit/unit1651.c	[]	[]
/src/curl/lib/socketpair.c	[]	[]
/src/curl/tests/libtest/lib1916.c	[]	[]
/src/curl/lib/ws.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit2602.c	[]	[]
/src/curl/tests/unit/unit1300.c	[]	[]
/src/curl/lib/socks.h	[]	[]
/src/curl/tests/unit/unit1395.c	[]	[]
/src/curl/tests/libtest/lib661.c	[]	[]
/src/curl/lib/amigaos.c	[]	[]
/src/curl/tests/libtest/lib1553.c	[]	[]
/src/curl/docs/examples/shared-connection-cache.c	[]	[]
/src/curl/lib/vauth/krb5_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1592.c	[]	[]
/src/curl/lib/if2ip.h	[]	[]
/src/curl/tests/libtest/lib554.c	[]	[]
/src/curl/tests/libtest/lib1571.c	[]	[]
/src/curl/lib/curl_trc.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/cf-ip-happy.c	[]	[]
/src/curl/tests/libtest/lib1301.c	[]	[]
/src/curl/tests/server/tftpd.c	[]	[]
/src/curl/scripts/schemetable.c	[]	[]
/src/curl/lib/curl_ctype.h	[]	[]
/src/curl/tests/libtest/lib1958.c	[]	[]
/src/curl/tests/libtest/lib1551.c	[]	[]
/src/curl/packages/OS400/ccsidcurl.c	[]	[]
/src/curl/tests/libtest/cli_ws_pingpong.c	[]	[]
/src/curl/lib/rand.h	[]	[]
/src/curl/tests/libtest/lib1549.c	[]	[]
/src/curl/lib/mprintf.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/unit/unit1650.c	[]	[]
/src/curl/lib/vquic/curl_quiche.c	[]	[]
/src/curl/tests/unit/unit3214.c	[]	[]
/src/curl/tests/unit/unit1397.c	[]	[]
/src/curl/tests/libtest/lib557.c	[]	[]
/src/curl/lib/curl_memrchr.c	[]	[]
/src/curl/tests/unit/unit1620.c	[]	[]
/src/curl/lib/vtls/x509asn1.c	[]	[]
/src/curl/src/tool_stderr.c	[]	[]
/src/curl/docs/examples/progressfunc.c	[]	[]
/src/curl/tests/libtest/lib1510.c	[]	[]
/src/curl/lib/ftp.c	[]	[]
/src/curl/tests/libtest/lib569.c	[]	[]
/src/curl/tests/libtest/lib1947.c	[]	[]
/src/curl_fuzzer/curl_fuzzer.cc	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib1918.c	[]	[]
/src/curl/tests/libtest/lib1593.c	[]	[]
/src/curl/tests/unit/unit1607.c	[]	[]
/src/curl/lib/cw-pause.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib3105.c	[]	[]
/src/curl/tests/libtest/lib3025.c	[]	[]
/src/curl/tests/libtest/lib578.c	[]	[]
/src/curl/tests/libtest/lib1915.c	[]	[]
/src/curl/src/tool_cb_soc.c	[]	[]
/src/curl/lib/curl_ntlm_core.h	[]	[]
/src/curl/tests/libtest/lib547.c	[]	[]
/src/curl/tests/libtest/lib1517.c	[]	[]
/src/curl/tests/unit/unit1307.c	[]	[]
/src/curl/tests/libtest/lib568.c	[]	[]
/src/curl/lib/sigpipe.h	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_sspi.c	['curl_fuzzer']	[]
/src/curl/lib/http_negotiate.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib1523.c	[]	[]
/src/curl/src/tool_libinfo.c	[]	[]
/src/curl/lib/md5.c	[]	[]
/src/curl/docs/examples/multi-uv.c	[]	[]
/src/curl/docs/examples/sendrecv.c	[]	[]
/src/curl/docs/examples/anyauthput.c	[]	[]
/src/curl/tests/unit/unit1611.c	[]	[]
/src/curl/lib/hash.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/vtls/cipher_suite.c	[]	[]
/src/curl/tests/libtest/lib695.c	[]	[]
/src/curl/lib/getinfo.c	['curl_fuzzer']	['curl_fuzzer']
/src/curl/tests/libtest/lib503.c	[]	[]
/src/curl/lib/cookie.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib508.c	[]	[]
/src/curl/tests/unit/unit3213.c	[]	[]
/src/curl/tests/unit/unit1606.c	[]	[]
/src/curl/lib/vauth/spnego_gssapi.c	[]	[]
/src/curl/tests/libtest/lib1907.c	[]	[]
/src/curl/tests/unit/unit1399.c	[]	[]
/src/curl/lib/curl_share.h	[]	[]
/src/curl_fuzzer/curl_fuzzer_callback.cc	[]	[]
/src/curl/src/tool_main.c	[]	[]
/src/curl/tests/libtest/lib3100.c	[]	[]
/src/curl/tests/unit/unit1309.c	[]	[]
/src/curl/lib/multi_ntfy.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/docs/examples/cookie_interface.c	[]	[]
/src/curl/lib/idn.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/curl_threads.h	[]	[]
/src/curl/src/tool_filetime.c	[]	[]
/src/curl/tests/libtest/lib1537.c	[]	[]
/src/curl/lib/http_chunks.c	[]	[]
/src/curl/tests/libtest/lib575.c	[]	[]
/src/curl/lib/cf-haproxy.c	[]	[]
/src/curl/tests/libtest/lib3034.c	[]	[]
/src/curl/tests/libtest/lib556.c	[]	[]
/src/curl/tests/tunit/tool1604.c	[]	[]
/src/curl/tests/unit/unit1660.c	[]	[]
/src/curl/lib/vauth/digest.c	[]	[]
/src/curl/tests/libtest/lib579.c	[]	[]
/src/curl/src/tool_operhlp.c	[]	[]
/src/curl/lib/rtsp.c	[]	[]
/src/curl/tests/libtest/lib3102.c	[]	[]
/src/curl/tests/libtest/lib2023.c	[]	[]
/src/curl/tests/libtest/lib1938.c	[]	[]
/src/curl/tests/libtest/lib1948.c	[]	[]
/src/curl/tests/libtest/lib757.c	[]	[]
/src/curl/tests/libtest/unitcheck.h	[]	[]
/src/curl/tests/libtest/lib541.c	[]	[]
/src/curl/src/tool_urlglob.c	[]	[]
/src/curl/tests/libtest/lib570.c	[]	[]
/src/curl/lib/ldap.c	[]	[]
/src/curl/tests/libtest/lib1507.c	[]	[]
/src/curl/lib/mime.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib516.c	[]	[]
/src/curl/lib/ratelimit.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1528.c	[]	[]
/src/curl/tests/libtest/lib1485.c	[]	[]
/src/curl/lib/splay.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl_fuzzer/curl_fuzzer.h	[]	[]
/src/curl/lib/idn.h	[]	[]
/src/curl/lib/strdup.c	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']	['fuzz_url', 'curl_fuzzer', 'curl_fuzzer/fuzz_bufq.cc']
/src/curl/docs/examples/log_failed_transfers.c	[]	[]
/src/curl/tests/libtest/lib3033.c	[]	[]
/src/curl/lib/cfilters.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1557.c	[]	[]
/src/curl/tests/libtest/lib2502.c	[]	[]
/src/curl/tests/libtest/lib523.c	[]	[]
/src/curl/tests/libtest/lib543.c	[]	[]
/src/curl/tests/unit/unit1601.c	[]	[]
/src/curl/tests/libtest/lib1964.c	[]	[]
/src/curl/tests/libtest/lib1935.c	[]	[]
/src/curl/lib/hostip.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1501.c	[]	[]
/src/curl/lib/smtp.c	['curl_fuzzer']	[]
/src/curl/tests/tunit/tool1394.c	[]	[]
/src/curl/lib/curl_endian.c	[]	[]
/src/curl/lib/dllmain.c	[]	[]
/src/curl/tests/libtest/lib1569.c	[]	[]
/src/curl/tests/libtest/lib1978.c	[]	[]
/src/curl/tests/libtest/lib582.c	[]	[]
/src/curl/lib/curlx/timeval.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/tftp.c	[]	[]
/src/curl/lib/connect.h	[]	[]
/src/curl/tests/unit/unit1655.c	[]	[]
/src/curl/tests/server/sws.c	[]	[]
/src/curl/lib/vauth/ntlm.c	[]	[]
/src/curl/tests/libtest/lib1568.c	[]	[]
/src/curl/lib/hsts.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/lib/version.c	[]	[]
/src/curl/lib/vtls/mbedtls.c	[]	[]
/src/curl/tests/libtest/lib589.c	[]	[]
/src/curl/tests/libtest/lib511.c	[]	[]
/src/curl/tests/libtest/lib1957.c	[]	[]
/src/curl/src/tool_ipfs.c	[]	[]
/src/curl/src/tool_easysrc.c	[]	[]
/src/curl/lib/easygetopt.c	[]	[]
/src/curl/tests/libtest/lib1533.c	[]	[]
/src/curl/tests/libtest/lib2309.c	[]	[]
/src/curl/src/tool_help.c	[]	[]
/src/curl/tests/libtest/lib525.c	[]	[]
/src/curl/docs/examples/ftpgetresp.c	[]	[]
/src/curl/lib/slist.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']
/src/curl/tests/libtest/lib1532.c	[]	[]
/src/curl/src/tool_bname.c	[]	[]
/src/curl/lib/curlx/winapi.c	['curl_fuzzer', 'curl_fuzzer/fuzz_fnmatch.cc']	[]
/src/curl/lib/http_ntlm.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib536.c	[]	[]
/src/curl/lib/file.c	['curl_fuzzer']	[]
/src/curl/tests/libtest/lib597.c	[]	[]
/src/curl/lib/vtls/wolfssl.c	[]	[]
/src/curl/include/curl/curl.h	[]	[]
/src/curl/lib/socks.c	[]	[]
/src/curl/lib/curl_memrchr.h	[]	[]
/src/curl/lib/pop3.c	[]	[]
/src/curl/tests/libtest/lib549.c	[]	[]
/src/curl/tests/libtest/first.h	[]	[]
/src/curl/src/tool_findfile.c	[]	[]
/src/curl/src/tool_operate.c	[]	[]
/src/curl/lib/cf-h2-proxy.c	[]	[]
/src/curl/tests/tunit/tool1621.c	[]	[]
/src/curl/lib/curl_setup.h	[]	[]
/src/curl/lib/transfer.h	[]	[]
/src/curl/tests/libtest/lib1527.c	[]	[]
/src/curl/lib/http_aws_sigv4.c	[]	[]
/src/curl/tests/libtest/lib1506.c	[]	[]
/src/curl/tests/server/resolve.c	[]	[]
/src/curl/tests/libtest/lib567.c	[]	[]

Directories in report

Directory
/src/curl/tests/server/
/src/curl_fuzzer/
/src/curl/scripts/
/src/curl/tests/tunit/
/src/curl/CMake/
/src/curl/packages/OS400/
/src/curl/lib/vauth/
/src/curl/tests/libtest/
/src/curl/include/curl/
/src/curl/lib/vquic/
/src/curl/docs/examples/
/src/curl/lib/
/src/curl/tests/unit/
/src/curl/packages/vms/
/src/curl/tests/http/testenv/mod_curltest/
/src/curl/lib/vtls/
/src/curl/lib/vssh/
/src/curl/lib/curlx/
/src/curl/src/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
puts	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE22

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
write	['curl_fuzzer']	N/A	Blocker function Arguments type Return type Constants touched fuzz_open_socket in /src/curl_fuzzer/curl_fuzzer_callback.cc:39 ['void*', 'curlsocktype', 'struct curl_sockaddr*'] curl_socket_t [] test_lib556 in /src/curl/tests/libtest/lib556.c:26 ['char*'] CURLcode [] write_wincon in /src/curl/tests/server/sockfilt.c:138 ['int', 'void*', 'size_t'] ssize_t [] do_tftp in /src/curl/tests/server/tftpd.c:894 ['struct testcase*', 'struct tftphdr*', 'ssize_t'] int [] rtsp_filter_rtp in /src/curl/lib/rtsp.c:692 ['struct Curl_easy*', 'struct rtsp_conn*', 'char*', 'size_t', 'size_t*'] CURLcode [] file_upload in /src/curl/lib/file.c:309 ['struct Curl_easy*', 'struct FILEPROTO*'] CURLcode [] qlog_callback in /src/curl/lib/vquic/curl_ngtcp2.c:433 ['void*', 'uint32_t', 'void*', 'size_t'] void []